
Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/072bd9d3-a3d2-358e-9dfd-30f8d534e792.roa
File: 072bd9d3-a3d2-358e-9dfd-30f8d534e792.roa (raw, json)
Hash identifier: +kdwPY4MeRbDQbFXFqV8K6d9PzP9pxCKer3xY6w4jk8=
Subject key identifier: E8:8D:C6:0E:97:8B:BC:EB:A2:96:39:AA:C3:3C:08:60:7A:25:81:9C
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F432858482AAD6BE7C711CDB90F6BE8C0
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/072bd9d3-a3d2-358e-9dfd-30f8d534e792.roa
Signing time: Wed 11 Dec 2024 03:00:16 +0000
ROA not before: Wed 11 Dec 2024 03:00:16 +0000
ROA not after: Tue 11 Mar 2025 02:00:16 +0000
asID: 13335
IP address blocks: 172.69.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:2a:ad:6b:e7:c7:11:cd:b9:0f:6b:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Dec 11 03:00:16 2024 GMT
Not After : Mar 11 02:00:16 2025 GMT
Subject: CN=faded919-97ca-4fdc-b35b-a06a67f99103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:32:98:3b:f2:d1:19:b9:02:c3:04:09:ce:
6a:4b:6b:7e:d5:b1:2e:a0:40:2c:9a:f1:20:4e:ed:
a1:62:dc:fc:ef:7c:42:c7:a7:83:cb:39:6e:a2:4f:
9f:87:b0:b9:d9:f7:3d:33:9d:01:86:8d:1f:58:69:
c1:75:42:ab:c9:84:9c:ca:19:39:fb:7b:75:91:e1:
10:f2:71:23:15:d1:45:ad:94:e5:90:71:a3:d0:79:
a0:e6:39:cb:84:e1:94:a2:84:c7:b4:50:6a:ea:2c:
8e:35:6d:50:0c:2c:df:a4:59:4a:74:a6:0a:12:26:
f8:79:46:30:4d:6b:21:06:41:8d:bb:c1:22:22:92:
8d:d2:dd:ba:7b:50:85:80:88:9f:e3:b3:66:44:88:
86:0a:75:b7:0c:77:99:81:db:75:24:23:cd:a6:19:
31:53:82:a8:56:9a:fd:3b:72:bf:b7:b7:a8:72:5b:
de:b9:cc:7a:b6:df:de:dd:93:12:43:f1:5c:92:4e:
af:10:12:c5:7d:e9:58:10:34:b8:10:83:7d:e4:c5:
dd:6f:39:87:02:11:e3:32:96:52:b0:d2:1f:f4:82:
37:1c:e5:1a:b2:69:ac:3a:c9:ff:c9:43:f7:f5:d9:
5e:52:3f:4d:3f:37:83:60:04:52:98:5c:3e:49:3a:
21:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:8D:C6:0E:97:8B:BC:EB:A2:96:39:AA:C3:3C:08:60:7A:25:81:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/072bd9d3-a3d2-358e-9dfd-30f8d534e792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv4:
172.69.213.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:55:6f:ac:47:4c:98:91:b2:73:50:5b:99:b7:a4:d5:67:58:
f8:1f:07:b0:a4:c3:bf:0d:02:1c:46:a4:ab:22:5c:0b:a0:31:
01:a4:c8:c2:38:19:cc:db:03:8d:c6:60:c1:3c:6c:d6:9c:a4:
e7:c4:4e:ae:50:68:6b:75:6b:42:02:d5:55:7a:79:95:c7:81:
27:d8:da:95:5e:c8:51:e5:78:05:18:c2:c5:87:2f:9e:be:4c:
bb:cf:62:68:9a:c8:ea:0d:fd:82:81:8f:ed:e1:8a:8a:df:b3:
a6:78:0e:9d:1d:e6:03:73:a4:29:9c:35:be:a0:ba:86:58:03:
f8:64:50:82:b4:61:aa:ce:07:e9:09:1f:2d:2e:3e:a0:0e:87:
f4:23:42:d0:b0:6b:cc:29:cf:5b:8a:88:9a:18:71:89:57:39:
65:59:5d:88:be:c5:87:79:33:5d:84:52:9e:de:29:57:75:aa:
8d:93:96:45:52:b5:f8:14:ac:8e:34:91:02:58:80:ca:4a:eb:
8a:e6:16:33:7b:b8:67:b3:1f:8b:1e:a0:e2:e9:10:3b:c1:fa:
a6:e5:c3:1a:0c:ef:a8:22:0b:38:8b:1e:30:79:16:6b:2b:01:
bb:4c:9d:ad:a8:81:cd:4d:1c:82:8c:0f:e0:ed:c1:98:cd:6d:
70:80:1c:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgqrWvnxxHNuQ9r6MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI0MTIxMTAzMDAxNloXDTI1MDMxMTAyMDAxNlowLzEtMCsGA1UEAxMk
ZmFkZWQ5MTktOTdjYS00ZmRjLWIzNWItYTA2YTY3Zjk5MTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy0ymDvy0Rm5AsMECc5qS2t+1bEuoEAsmvEg
Tu2hYtz873xCx6eDyzluok+fh7C52fc9M50Bho0fWGnBdUKryYScyhk5+3t1keEQ
8nEjFdFFrZTlkHGj0Hmg5jnLhOGUooTHtFBq6iyONW1QDCzfpFlKdKYKEib4eUYw
TWshBkGNu8EiIpKN0t26e1CFgIif47NmRIiGCnW3DHeZgdt1JCPNphkxU4KoVpr9
O3K/t7eoclveucx6tt/e3ZMSQ/Fckk6vEBLFfelYEDS4EIN95MXdbzmHAhHjMpZS
sNIf9II3HOUasmmsOsn/yUP39dleUj9NPzeDYARSmFw+STohAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOiNxg6Xi7zropY5qsM8CGB6JYGcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvMDcyYmQ5ZDMtYTNkMi0z
NThlLTlkZmQtMzBmOGQ1MzRlNzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEXVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIlVb6xHTJiRsnNQW5m3pNVnWPgfB7Ckw78NAhxGpKsiXAugMQGkyMI4
GczbA43GYME8bNacpOfETq5QaGt1a0IC1VV6eZXHgSfY2pVeyFHleAUYwsWHL56+
TLvPYmiayOoN/YKBj+3hiorfs6Z4Dp0d5gNzpCmcNb6guoZYA/hkUIK0YarOB+kJ
Hy0uPqAOh/QjQtCwa8wpz1uKiJoYcYlXOWVZXYi+xYd5M12EUp7eKVd1qo2TlkVS
tfgUrI40kQJYgMpK64rmFjN7uGezH4seoOLpEDvB+qblwxoM76giCziLHjB5Fmsr
AbtMna2ogc1NHIKMD+DtwZjNbXCAHFY=
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:46:55 2025 by rpki-client